
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json)
Hash identifier: xNDxY1abgV119TJtmjAhQPOrVOOtX2GaILQRkgVWMtc=
Subject key identifier: 1A:54:78:6C:11:85:95:E1:2E:EE:73:34:7D:F7:F3:96:51:46:BE:1C
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial: 1352
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
Manifest number: 133A
Signing time: Wed 22 Jul 2026 17:06:35 +0000
Manifest this update: Wed 22 Jul 2026 17:06:35 +0000
Manifest next update: Wed 29 Jul 2026 17:06:35 +0000
Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: Bu9UALcOwg5GKilxvGfMxJkQQkQ+hkrNbCvlkdzIfOk=)
2: 35615A30C84511ED90A61540C4F9AE02.roa (hash: ikwRwX6HznSAvB0gllaQ7OaCqCsraBq8/S0KLelO+q8=)
3: 3489528EC84511ED90A61540C4F9AE02.roa (hash: IAHu/i87YCurf7TsutZ4NJzzxkW8+ff7z519ukOdfYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4946 (0x1352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Validity
Not Before: Jul 22 17:06:35 2026 GMT
Not After : Jul 29 17:06:35 2026 GMT
Subject: CN=6a60f89b-0814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:1b:ef:0b:ca:8d:14:1f:12:89:09:0f:8a:
72:19:85:ae:29:32:49:77:5f:09:ea:69:a1:e6:ca:
60:0b:84:87:39:e1:0a:2e:b9:69:05:13:30:aa:54:
74:b5:78:cb:d1:0d:6d:09:34:7e:59:b3:c8:8e:81:
23:f3:79:fa:a5:39:62:d2:40:b2:71:e3:36:b6:51:
6a:14:65:e4:04:7e:85:a2:6c:da:db:71:cc:b9:62:
dd:50:76:03:22:6e:75:fa:a2:b7:c3:6b:23:b4:58:
c2:c6:f0:5f:2b:57:6f:3d:18:32:43:10:46:f9:64:
60:b0:f1:ac:21:45:fd:dc:7c:06:36:cc:b8:42:0b:
72:d5:6d:da:72:57:2c:2a:31:ab:dc:90:94:c0:7d:
c8:b2:cb:a3:e3:84:4b:fe:5f:d3:48:52:6b:d2:01:
b1:ee:bf:51:83:cb:22:ab:69:20:3a:b9:80:4d:ef:
a9:ef:b2:41:50:4f:6c:bf:c1:24:c9:8a:eb:e7:68:
e9:96:8d:ee:ce:40:96:37:e0:2d:b3:da:bb:92:f0:
27:06:0b:1d:f5:55:f8:34:72:5e:c6:0b:ec:b5:a7:
91:1f:c3:29:8d:d1:98:98:3c:32:d9:fb:2d:12:db:
80:2a:5d:07:c9:55:2d:6a:c4:34:bd:b6:9b:60:ef:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:54:78:6C:11:85:95:E1:2E:EE:73:34:7D:F7:F3:96:51:46:BE:1C
X509v3 Authority Key Identifier:
keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:70:a8:a4:3a:6d:0e:bb:48:dd:8c:1d:1d:b0:8c:0b:26:ba:
3d:fb:17:75:de:3c:df:c6:85:1e:6c:5e:36:c3:03:ff:8f:c9:
89:50:0a:75:94:1d:d4:12:f6:5b:7b:03:a3:e2:4b:9a:1d:09:
4d:e5:5e:2b:7d:ac:78:08:5f:4c:7d:b5:3e:62:62:69:35:1a:
af:0d:f5:dc:c2:1a:a1:fb:ee:23:38:2d:80:21:a9:30:17:ed:
76:25:ab:de:82:36:9a:ac:32:ea:01:fa:2b:68:8f:79:ce:6a:
99:8e:c9:29:a0:a0:e6:06:1e:ad:17:4b:3c:00:c0:6b:5e:ae:
ff:93:b9:a7:51:76:3a:e0:9b:57:cd:7a:1d:1e:b1:bd:3b:4f:
65:ec:e9:c5:f0:2f:ef:be:b2:5b:e9:32:53:bd:4e:d0:07:ab:
2a:ed:80:ad:c7:6c:4c:42:6a:43:0b:da:e5:a2:5f:e8:ab:17:
3e:1c:64:76:c8:58:2a:31:3f:85:98:d2:7e:32:9a:31:b3:b1:
34:b6:25:d9:a2:d0:19:c0:aa:12:aa:97:33:c7:0a:48:93:f4:
12:86:69:5c:47:ca:ff:cd:ce:1f:6f:10:f9:59:3a:6a:14:8e:
34:48:8e:66:12:27:4c:fb:c4:08:f5:4a:7e:84:19:24:17:3e:
c3:fc:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:27 2026 by rpki-client